Jailbreak Context Lingers: Divergent Safety Routing and Its Cross-Task Predictability in Tool Agents.

arXiv:2609.34686v1 Announce Type: new Abstract: As large language models increasingly operate as tool-using agents, post-jailbreak safety feedback is often assumed to serve as a reliable safeguard; however, how lingering jailbreak context shapes subsequent age